GMO Internet Group says cyber extortion demand reached ¥7.9 billion
Published · Updated
What happened
GMO Internet Group said on October 26 that attackers demanded ¥7.9 billion in connection with a recent unauthorized-access incident.
Why it matters
A disclosed extortion demand of this size gives regulators, law-enforcement agencies, and major companies a new reference point for the cost of cyber incidents in Japan. It can alter near-term corporate decisions on disclosure, ransom policy, business continuity spending, and requests for government coordination during active attacks.
GMO Internet Group disclosed on October 26 that attackers in a recent unauthorized-access case demanded ¥7.9 billion. The disclosure turns a previously technical intrusion into a board-level corporate security event with possible policy spillover, because the size of the demand will sharpen business lobbying over incident reporting, government support, and the scope of national cyber response powers. The immediate relevance is not only the company’s remediation path, but whether ministries now face renewed pressure to clarify what assistance firms can expect during large extortion cases.
Watch for
National center of Incident readiness and Strategy for Cybersecurity statement by 2026-10-30 on coordination or reporting expectations for major private-sector cyber extortion cases National Police Agency acknowledgement by 2026-10-30 of investigation status or guidance on ransom-related criminal response Ministry of Economy, Trade and Industry notice by 2026-10-30 on incident-reporting, supply-chain continuity, or cyber support measures for affected enterprises GMO Internet Group filing or investor disclosure by 2026-10-30 on service restoration scope, data exposure, or financial-loss estimate